442c5e4c8e56bf5fb453fa70d9afefac6d8aad0d861db57055ad4e8bbe31535f | Triage

Submit
Reports

Overview

overview

Static

static

3

AA Master ...DF.exe

windows7-x64

AA Master ...DF.exe

windows10-2004-x64

ActionCenter.dll

windows7-x64

1

ActionCenter.dll

windows10-2004-x64

1

attach.dll

windows7-x64

1

attach.dll

windows10-2004-x64

1

jawt.dll

windows7-x64

1

jawt.dll

windows10-2004-x64

1

jli.dll

windows7-x64

1

jli.dll

windows10-2004-x64

5

msvcp140.dll

windows7-x64

1

msvcp140.dll

windows10-2004-x64

1

ucrtbase.dll

windows10-2004-x64

1

vcruntime140.dll

windows7-x64

1

vcruntime140.dll

windows10-2004-x64

1

vcruntime140_1.dll

windows7-x64

1

vcruntime140_1.dll

windows10-2004-x64

1

verify.dll

windows7-x64

1

verify.dll

windows10-2004-x64

1

Analysis

max time kernel
125s
max time network
127s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
18-09-2024 11:05

Sharing

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

AA Master Maritime Final Draft 92000118289301-PDF.exe

Resource

win7-20240903-en

agenttesla credential_access discovery keylogger spyware stealer trojan

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral2

Sample

AA Master Maritime Final Draft 92000118289301-PDF.exe

Resource

win10v2004-20240802-en

agenttesla credential_access discovery keylogger spyware stealer trojan

windows10-2004-x64

8 signatures

150 seconds

Behavioral task

behavioral3

Sample

ActionCenter.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

ActionCenter.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

attach.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

attach.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

jawt.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

jawt.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

jli.dll

Resource

win7-20240903-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

jli.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral11

Sample

msvcp140.dll

Resource

win7-20240903-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

msvcp140.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

ucrtbase.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

vcruntime140.dll

Resource

win7-20240903-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral15

Sample

vcruntime140.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

vcruntime140_1.dll

Resource

win7-20240903-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral17

Sample

vcruntime140_1.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

verify.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

verify.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target

vcruntime140_1.dll
Size

49KB
MD5

c106bef63b8db2f32de277b0c314249f
SHA1

b172b5809f95bd4f4181fe30c30368b50a27f08a
SHA256

dced523e24b4374522c86f7bbfc0ac8d8e1078336492629722081339adaad9ba
SHA512

77aab947ffec187f054c68899f2b4186a53b2901fb74ee6702586c1207a4abea238c64da0aa3ebe56695c31606b315f9a6289ca1748e9770fcfca5816e7e6580
SSDEEP

768:+Cm5yhUcwrHY/ntTxT6ovF7IVwwIl9znKxnVbgvqxNJUoK/Y/+b:lOHc16opIVwwI3znKxnKvKNJUoK/x

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\vcruntime140_1.dll,#1
1⤵
PID:3420

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=4332,i,8293235976513689021,7261015831736501466,262144 --variations-seed-version --mojo-platform-channel-handle=3884 /prefetch:8
1⤵
PID:4456

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2024

Terms | Privacy